KPMG-2002012: Sambar Webserver Serverside Fileparse Bypass

-------------------------------------------------------------------- -=Sambar Webserver Serverside Fileparse Bypass=- courtesy of KPMG Denmark BUG-ID: 2002012 Released: 17th Apr 2002 -------------------------------------------------------------------- Problem: ======== A flaw in the serverside UR...

[NT] Sambar Webserver Serverside Fileparse Bypass

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

iXsecurity.20020327.tivoli_tsm_dsmcad.a

iXsecurity Security Vulnerability Report No: iXsecurity.20020327.tivolitsmdsmcad.a =========================================== Vulnerability Summary --------------------- Problem: The Tivoli Storage Manager webserver, running on port 1581 has a buffer overflow condition. Threat: An attacker could...

iXsecurity.20020314.csadmin_fmt.a

iXsecurity Security Vulnerability Report No: iXsecurity.20020314.csadminfmt.a ======================================== Vulnerability Summary --------------------- Problem: Cisco Secure ACS webserver has a format string vulnerability. Threat: An attacker could send an "invalid" URL to the webserve...

CVE-2002-0111

Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. dot dot in the URL...

Apache Win32 1.3.x2.0.x - Batch File Remote Command Execution

Apache Win32 1.3.x2.0.x - Batch File Remote Command Execution source: https://www.securityfocus.com/bid/4335/info Special characters such as | may not be filtered by the batch file handler when a web request is made for a batch file. As a result, a remote attacker may be able to execute arbitrary...

CVE-2001-0558

CVE-2001-0558 affects Jana Webserver 2.01 beta 1 and earlier. A remote attacker can cause a denial of service by sending a URL request that includes an MS-DOS device name (e.g., GET /aux HTTP/1.0). Connected sources corroborate the DOS impact via MS-DOS device names; OpenVAS/Nessus references lis...

CVE-2001-0558

T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name i.e. GET /aux HTTP/1.0...

CVE-2001-0558: Undefined Security Weakness

T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name i.e. GET /aux HTTP/1.0...

Xerver 2.10 - Multiple Request Denial of Service Vulnerabilities

Xerver 2.10 - Multiple Request Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/4254/info Xerver is a freely available webserver, written in Java. It will run on any operating system with Java installed, including Microsoft Windows, Unix/Linux variants, MacOS, etc. It h...

Xerver 2.10 - Multiple Request Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/4254/info Xerver is a freely available webserver, written in Java. It will run on any operating system with Java installed, including Microsoft Windows, Unix/Linux variants, MacOS, etc. It has been reported that sending an excessive number of requests for...

Working Resources BadBlue 1.51.6 - Directory Traversal

Working Resources BadBlue 1.51.6 - Directory Traversal source: https://www.securityfocus.com/bid/4179/info Working Resources BadBlue is a webserver intended to share various resources and is developed for Microsoft Windows environments. BadBlue is prone to directory traversal attacks. It is...

ScriptEase:WebServer Edition vulnerability

Program: ScriptEase:WebServer Edition Url: www.nombas.com Problem: Any user can read files on server using one of examle scripts: comment2.jse Systems affected: Linux, Novell Netware, Windows 9x/NT/2k Example: WindowsNovell Netware:...

Dino's Webserver v1.2 DoS, possible overflow

Dino's WebServer v1.2 is vulnerable to a Denial of Service attack with a possible buffer overflow or heap overflow. Explanation: Given a series of requests the server will hang at 99 CPU. To Dino's actually, Anders G. Jensen credit, the priority is low enough that other programs appear to be taxe...

Multiple bugs in Dino's WebServer

Directory traversal, buffer overflow...

Phusion-web.txt

------oOo---------------- Phusion Webserver Directory Traversal, DoS Vulnerabilities and BufferOverrun, Released exploits Codes. ------oOo---------------- Phusion Webserver for Windows 9x/NT/2000 contains remote vulnerabilities which allow users to see and retrieve any file on the server. Exploit...

Phusion-Webserver-v1.0-Bugs&Exploits-Remotes

------oOo---------------- Phusion Webserver Directory Traversal, DoS Vulnerabilities and BufferOverrun, Released exploits Codes. ------oOo---------------- Phusion Webserver for Windows 9x/NT/2000 contains remote vulnerabilities which allow users to see and retrieve any file on the server. Exploit...

Многочисленные проблемы в Phusion Webserver (multiple bugs)

Обратный путь в директориях, переполнения буфера и прочее...

Phusion WebServer 1.0 - URL Remote Buffer Overflow

Phusion WebServer 1.0 - URL Remote Buffer Overflow // source: https://www.securityfocus.com/bid/4119/info Phusion Webserver is a commercial HTTP server that runs on Microsoft Windows 9x/NT/2000 operating systems. Phusion Webserver does not perform sufficient bounds checking of externally supplied...

Phusion WebServer 1.0 - Long URL Denial of Service

Phusion WebServer 1.0 - Long URL Denial of Service source: https://www.securityfocus.com/bid/4118/info Phusion Webserver is a commercial HTTP server that runs on Microsoft Windows 9x/NT/2000 operating systems. It is possible for a remote attacker to deny service to legitimate users of the service...